Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8f5c5ba9-2fd7-3448-9bca-f14a3696baa3.roa
File: 8f5c5ba9-2fd7-3448-9bca-f14a3696baa3.roa (raw, json)
Hash identifier: NrZt3f1MHnUWBHkzgTRx90MHvUsix+IwBfb2mZE46cY=
Subject key identifier: E4:90:8E:92:83:05:AC:AF:3E:75:D6:D4:43:8D:85:91:76:84:EC:A2
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844720B5D7646DAFB4562048780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8f5c5ba9-2fd7-3448-9bca-f14a3696baa3.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.172.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0b:5d:76:46:da:fb:45:62:04:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=7519f5ce-31d2-4b15-9d13-2cab80952403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:db:e4:40:6f:18:29:e6:3d:cc:4f:f9:f3:
fe:84:b3:68:16:65:7b:94:63:fa:aa:64:77:19:5e:
56:37:91:47:39:09:cc:ff:89:f8:2a:36:c5:41:6e:
28:0b:fa:c5:74:bb:9a:ad:f0:7f:8f:ae:ed:b2:0a:
60:9d:0a:b4:6a:8d:49:52:9e:28:ef:85:38:f5:51:
c5:50:c3:bf:a4:39:ca:d8:0d:7b:1a:71:b6:70:fe:
60:20:24:eb:8e:15:8c:64:e5:d6:b3:60:a5:73:72:
24:c5:38:83:f7:8b:5c:41:df:1c:53:c4:2b:0f:3b:
83:c7:83:31:62:60:8b:b3:51:07:c5:ca:c3:31:51:
44:58:13:31:4d:e8:38:95:d3:38:ce:ca:cd:d2:e8:
79:7c:0c:c6:11:76:a0:c6:2d:14:f3:4e:08:36:11:
de:96:23:db:28:9d:ee:c1:d5:08:72:4f:32:f0:eb:
bb:13:9c:64:25:61:4c:c1:01:5b:55:dd:af:ae:14:
8d:93:55:05:71:21:2b:8a:35:7c:80:70:78:8f:bc:
91:fa:62:94:b1:9f:3a:7d:41:fd:7f:9a:b5:2b:f7:
17:6a:8e:00:36:35:98:bc:cf:c1:b2:9e:0c:49:04:
38:e1:48:71:68:bd:25:18:d8:b8:5f:ff:2a:86:e2:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:90:8E:92:83:05:AC:AF:3E:75:D6:D4:43:8D:85:91:76:84:EC:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8f5c5ba9-2fd7-3448-9bca-f14a3696baa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:13:f3:91:87:bb:34:a1:f6:1f:99:6a:78:7c:83:0e:1e:e6:
b3:cb:bd:02:f9:8b:b8:fb:c1:78:ee:fe:22:67:19:16:4b:03:
d5:b9:52:e3:15:da:b3:ec:ba:c7:f8:8e:27:fe:bd:cf:fa:82:
c7:e8:41:e1:0b:4b:89:26:b9:9d:ad:90:4c:1e:99:8b:b8:d0:
d7:32:53:3d:5a:91:01:0b:e5:cc:dc:49:b0:3c:52:13:18:47:
d6:45:f0:c3:ae:3e:75:ac:dd:cc:ce:5b:77:3c:48:de:e4:7c:
d5:03:80:87:9d:67:a4:7d:e7:ae:f5:05:06:5e:2f:fa:a1:c2:
a6:46:8e:cd:00:7d:de:00:c4:4e:b0:50:f5:48:7f:80:d2:d2:
f0:64:7c:de:12:97:de:27:31:d0:64:52:93:79:f3:95:03:8f:
4e:31:8a:c0:79:ed:b7:b6:74:4f:c3:6a:22:71:82:25:02:55:
f3:3e:eb:3b:5b:63:e4:d9:6d:29:70:42:60:a1:dd:6e:d5:6c:
b5:54:a7:1a:1b:27:5f:c6:70:d0:9f:b5:d6:ef:70:01:cd:08:
51:e0:c0:c1:93:e7:f3:5f:d4:d8:62:28:37:40:0f:5b:e8:3c:
59:74:a1:9a:af:36:39:6e:7d:3a:81:02:54:7e:7f:60:a7:2e:
ef:73:a4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:05:51 2025 by rpki-client